chromium can't encrypt saved passwords

Bug #585234 reported by Brian May
258
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Chromium Browser
Unknown
Unknown
chromium-browser (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

Binary package hint: chromium-browser

See:

http://penguindroppings.wordpress.com/2010/05/18/chromium-saved-passwords/
http://code.google.com/p/chromium/issues/detail?id=1397

Apparently there are hooks to do the encryption, but they haven't been implemented on Linux.

I consider this a security issue, as users have come to expect passwords will be encrypted through other browsers such as Firefox. If a computer is stolen, the thief can get unlimited access to all passwords just by booting up onto a live CD.

I have confirmed this with chromium-browser 5.0.342.9~r43360-0ubuntu2 in lucid.

Brian May

visibility: private → public
Changed in chromium-browser (Ubuntu):
status: New → Confirmed
summary: - chromium doesn't encrypt passwords
+ chromium can't encrypt passwords
summary: - chromium can't encrypt passwords
+ chromium can't encrypt saved passwords
Revision history for this message
Evan Martin (Chromium) (evan-chromium) wrote :

FWIW, we're very close to landing the gnome keyring (and the KDE equiv) support.

Chad Miller (cmiller)
Changed in chromium-browser (Ubuntu):
assignee: nobody → Chad Miller (cmiller)
Revision history for this message
Olivier Tilloy (osomon) wrote :

Passwords are encrypted using gnome keyring.

Changed in chromium-browser (Ubuntu):
status: Confirmed → Fix Released
assignee: Chad Miller (cmiller) → nobody
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.